This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/7Dxs-kwqOJgrw3u5KznluVP8t8A.roa File: 7Dxs-kwqOJgrw3u5KznluVP8t8A.roa (raw, json) Hash identifier: IFHvZOh4yzbeydpAnecCX/WfLOcEI7MF/vuyjzk8yCo= Subject key identifier: EC:3C:6C:FA:4C:2A:38:98:2B:C3:7B:B9:2B:39:E5:B9:53:FC:B7:C0 Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Certificate serial: 019B573107744EF418C9680250C50AF6ED7D Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/7Dxs-kwqOJgrw3u5KznluVP8t8A.roa Signing time: Thu 25 Dec 2025 20:26:29 +0000 ROA not before: Thu 25 Dec 2025 20:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203436 IP address blocks: 176.97.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:31:07:74:4e:f4:18:c9:68:02:50:c5:0a:f6:ed:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Validity Not Before: Dec 25 20:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec3c6cfa4c2a38982bc37bb92b39e5b953fcb7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:6f:bc:f1:df:0e:6d:1c:b7:db:06:cb:7c: 0b:ef:8a:9a:d7:93:0a:5d:aa:c6:c8:60:cd:31:0c: 0b:f6:da:68:9a:1e:46:eb:f7:71:ea:f0:d9:07:ad: 2f:ff:0a:81:72:bd:95:a2:4c:38:24:5c:29:0c:2b: ec:ae:7f:e1:f7:8c:b0:de:0b:b5:ef:45:1d:40:b1: 0c:57:8c:04:16:b2:49:2c:8f:45:57:5c:46:a1:bc: 76:c1:66:f1:0e:4f:33:75:57:ae:5f:00:4c:6e:08: 97:08:20:1e:ee:3f:15:6b:54:db:af:bd:3e:17:6e: 8e:64:98:3b:50:55:9b:a2:2d:3a:8f:14:63:3a:ba: ce:8a:96:10:19:91:78:35:05:55:ef:4d:a4:07:c5: 31:fe:29:60:4b:5f:33:ef:31:b0:72:68:5c:b9:92: c6:8b:bb:2d:59:33:50:79:b2:cb:c7:8f:59:a1:aa: 7a:71:e0:39:e3:e8:fb:fc:12:ee:4e:19:68:a7:72: 53:43:98:85:3a:cc:b9:31:99:52:5f:6b:89:a0:da: e3:08:ff:f5:77:81:45:b8:88:e4:78:38:3e:41:83: e3:07:cd:d5:ac:11:b2:af:66:d0:9e:89:28:0c:93: 2a:72:eb:71:a5:61:5b:5b:cd:9d:bf:66:d8:c4:3a: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3C:6C:FA:4C:2A:38:98:2B:C3:7B:B9:2B:39:E5:B9:53:FC:B7:C0 X509v3 Authority Key Identifier: keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/7Dxs-kwqOJgrw3u5KznluVP8t8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.212.0/24 Signature Algorithm: sha256WithRSAEncryption 74:3d:13:dd:86:a8:3e:fe:56:b0:54:9e:eb:42:e7:05:1b:db: 8f:ce:74:0b:12:45:7d:35:8d:f0:f5:74:b3:3f:7d:a0:8b:7b: 20:b0:2e:b6:05:26:2c:8d:4a:38:e8:6c:28:55:88:0f:50:15: de:2a:7f:87:01:81:55:9e:e2:44:0e:77:9f:2f:34:4a:b6:27: 18:db:c8:2f:d0:20:4c:f8:74:15:0f:93:07:2c:6a:43:31:5a: 10:45:d6:63:4e:1f:49:65:52:47:14:4f:d1:fa:b1:af:63:6f: c6:4b:2e:b6:80:f6:b0:34:27:c0:b5:00:b3:85:ee:d7:07:c1: d5:96:77:a9:12:1e:1e:c3:87:ee:b9:bf:45:63:96:f7:c5:1e: a1:a2:5c:9b:c2:0a:d2:06:5e:c8:da:4a:8d:eb:20:a4:51:cf: cc:33:de:ea:34:d6:4a:05:24:0d:e4:ff:f9:14:f8:ce:a6:d0: d6:c7:85:a8:2b:60:44:17:38:e7:22:cb:b4:d2:b0:c6:1b:c4: a8:45:83:d9:8d:7a:4f:8b:ab:b6:c8:f0:22:7b:a5:0c:8f:67: 55:a5:e7:57:81:2f:5e:65:5d:04:b6:05:95:d8:ba:9d:2f:b1: 12:42:55:59:62:c5:f8:2a:31:65:05:66:c1:29:b6:1a:33:73: 58:f1:47:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtXMQd0TvQYyWgCUMUK9u19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5 ZmJlMzkwHhcNMjUxMjI1MjAyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzNjNmNmYTRjMmEzODk4MmJjMzdiYjkyYjM5ZTViOTUzZmNiN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ZvvPHfDm0ct9sGy3wL74qa15MK XarGyGDNMQwL9tpomh5G6/dx6vDZB60v/wqBcr2Vokw4JFwpDCvsrn/h94yw3gu1 70UdQLEMV4wEFrJJLI9FV1xGobx2wWbxDk8zdVeuXwBMbgiXCCAe7j8Va1Tbr70+ F26OZJg7UFWboi06jxRjOrrOipYQGZF4NQVV702kB8Ux/ilgS18z7zGwcmhcuZLG i7stWTNQebLLx49Zoap6ceA54+j7/BLuThlop3JTQ5iFOsy5MZlSX2uJoNrjCP/1 d4FFuIjkeDg+QYPjB83VrBGyr2bQnokoDJMqcutxpWFbW82dv2bYxDpShQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOw8bPpMKjiYK8N7uSs55blT/LfAMB8GA1UdIwQY MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt Njg3OWNjMjZkN2I2LzEvN0R4cy1rd3FPSmdydzN1NUt6bmx1VlA4dDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2 LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHUMA0G CSqGSIb3DQEBCwUAA4IBAQB0PRPdhqg+/lawVJ7rQucFG9uPznQLEkV9NY3w9XSz P32gi3sgsC62BSYsjUo46GwoVYgPUBXeKn+HAYFVnuJEDnefLzRKticY28gv0CBM +HQVD5MHLGpDMVoQRdZjTh9JZVJHFE/R+rGvY2/GSy62gPawNCfAtQCzhe7XB8HV lnepEh4ew4fuub9FY5b3xR6holybwgrSBl7I2kqN6yCkUc/MM97qNNZKBSQN5P/5 FPjOptDWx4WoK2BEFzjnIsu00rDGG8SoRYPZjXpPi6u2yPAie6UMj2dVpedXgS9e ZV0EtgWV2LqdL7ESQlVZYsX4KjFlBWbBKbYaM3NY8UeV -----END CERTIFICATE-----Generated at Sun Dec 28 07:28:05 2025 by rpki-client